Lucene search

K
cvelistGoogle_androidCVELIST:CVE-2023-20994
HistoryMar 24, 2023 - 12:00 a.m.

CVE-2023-20994

2023-03-2400:00:00
google_android
www.cve.org
3
android
ufdt_convert.c
bounds check
local escalation
privilege
system execution
exploitation
product vulnerability

EPSS

0

Percentile

5.1%

In _ufdt_output_property_to_fdt of ufdt_convert.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-259062118

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Android",
    "versions": [
      {
        "version": "Android-13",
        "status": "affected"
      }
    ]
  }
]

EPSS

0

Percentile

5.1%

Related for CVELIST:CVE-2023-20994